Kerberos Client Version D.1.6.2.
© Copyright 2007 Hewlett-Packard Development Company, L.P Legal Notices Copyright 2007 Hewlett-Packard Development Company, L.P. Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license.
Table of Contents 1 Kerberos Client D.1.6.2.01 Release Notes......................................................................................5 Announcement.....................................................................................................................5 Encryption Types Supported by Kerberos Client...........................................................7 What Is New in This Version................................................................................................
List of Tables 1-1 1-2 1-3 1-4 4 Kerberos Client Libraries on PA-RISC (PA) and Itanium (IA) Architecture................5 Kerberos Client Utilities................................................................................................6 Encryption Types supported by Kerberos Client D.1.6.2.01.........................................7 System Requirements for Installing Kerberos Client D.1.6.2.01.................................
1 Kerberos Client D.1.6.2.01 Release Notes Information in this document applies to the Web release of Kerberos Client D.1.6.2.01 for HP-UX 11i v2. Announcement Kerberos Client (krb5client) is a Web upgrade for KRB5-Client. KRB5-Client is a part of the core HP-UX 11i v1 and HP-UX 11i v2 operating systems. The previous version of Kerberos Client, KRB5-Client, was released as part of the core HP-UX 11i v2 operating system.
Table 1-1 Kerberos Client Libraries on PA-RISC (PA) and Itanium (IA) Architecture (continued) Architecture 32-bit 64-bit Functionality Itanium /usr/lib/hpux32/ libkrb5.so -> /opt/ krb5client/lib/ hpux32/libkrb5.so.1 Authenticate users, verify /usr/lib/hpux64/ tickets, create authenticator, libkrb5.so -> /opt/ and manage the context. krb5client/lib/ hpux64/libkrb5.so.1 Print appropriate error /usr/lib/hpux32/ /usr/lib/hpux64/ messages to stderr based on libcom_err.so -> libcom_err.
• • • • /usr/include/profile.h -> /opt/krb5client/include/profile.h /usr/include/krb5.h -> /opt/krb5client/include/krb5.h /usr/include/com_err.h -> /opt/krb5client/include/com_err.h /usr/include/krb5/gssapi.h -> /opt/krb5client/include/krb5/ gssapi.h Encryption Types Supported by Kerberos Client Table 1-3 lists the encryption types supported by Kerberos Client D.1.6.2.01. Table 1-3 Encryption Types supported by Kerberos Client D.1.6.2.
Table 1-3 Encryption Types supported by Kerberos Client D.1.6.2.01 (continued) Encryption Type Description arcfour-hmac-md5 ArcFour with HMAC/md5 This encryption type is an alias to the arcfour-hmac encryption type. If you specify arcfour-hmac-md5 in the configuration file, then it’s behavior is the same as arcfour-hmac. arcfour-hmac-exp Exportable ArcFour with HMAC/md5 rc4-hmac-exp Exportable ArcFour with HMAC/md5 This encryption type is an alias to the arcfour-hmac-exp encryption type.
• • SASL/GSS-API bind to Netscape Directory Server used to fail when SSL was enabled Support for powerful cryptographic algorithms This version of Kerberos Client software supports 3DES, AES, and RC4 • Support for IPv6 IPv6 support is enabled on this version of Kerberos Client software • Support for TCP Kerberos Client libraries can now use TCP to connect to the Key Distribution Center (KDC).
System Requirements Table 1-4 specifies the minimum system requirements for installing Kerberos Client D.1.6.2.01. Table 1-4 System Requirements for Installing Kerberos Client D.1.6.2.01 Component Requirement Operating system HP-UX 11i v2 Hardware requirement HP 9000 workstations and servers with a minimum of 32 MB of memory and sufficient swap space. HP recommends that your servers or workstations have a minimum of 50 MB of memory.
NOTE: When using the swlist and swinstall commands, you must specify the absolute path of the source depot. 6. On a standalone system, enter the following command to install the Kerberos Client software bundle: # swinstall -s /tmp/KRB5CLIENT.depot \* The swinstall window is displayed. 7. 8. Select Mark for Install in the Action menu to select the bundle and the patches that you want to install. Select Install in the Action menu. The Install Analysis window is displayed. 9.
QXCR1000850603 Symptom: The Kerberos Client fails when configured with Apache. Defect Description: When an Apache server configured with Kerberos Client 1.6.2 receives a very high number of simultaneous requests, the Kerberos Client sends the SIGSEGV signal to the Apache server. This leads to Kerberos Client failure. Resolution: The Kerberos Client is fixed to resolve this issue. QXCR1000877253 Symptom: When Kerberos Client is configured with PAM-Kerberos, Kerberos Client ignores certain options.
